⤷ Title: Login - CTF Write-up | Finding Exposed Credentials in JavaScript
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 05:16:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #javascript #ctf #bug_bounty
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 05:16:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #javascript #ctf #bug_bounty
Medium
Login - CTF Write-up | Finding Exposed Credentials in JavaScript
Introduction
⤷ Title: A Fake CAPTCHA Appeared in Our Admin Portal: What I Learned About ClickFix Attacks and Third-Party…
════════════════════════
𐀪 Author: Alamgir Hossen
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 17:53:04 GMT
════════════════════════
⌗ Tags: #software_engineering #javascript #application_security #nodejs #cybersecurity
════════════════════════
𐀪 Author: Alamgir Hossen
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 17:53:04 GMT
════════════════════════
⌗ Tags: #software_engineering #javascript #application_security #nodejs #cybersecurity
Medium
A Fake CAPTCHA Appeared in Our Admin Portal: What I Learned About ClickFix Attacks and Third-Party JavaScript Security
An unexpected security incident in a Node.js project taught me why we should never blindly trust scripts loaded from external sources.
⤷ Title: Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:37:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #secrets #web_security #javascript
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:37:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #secrets #web_security #javascript
Medium
Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
Your JavaScript Has a Secret. Let’s Find Out What It Is.
⤷ Title: Beyond Rows and Columns: Interactive Ext JS Grids and ReExt for React Developers
════════════════════════
𐀪 Author: Vishal P
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 12:53:13 GMT
════════════════════════
⌗ Tags: #web_development #application_security #mobile_app_development #javascript
════════════════════════
𐀪 Author: Vishal P
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 12:53:13 GMT
════════════════════════
⌗ Tags: #web_development #application_security #mobile_app_development #javascript
Medium
Beyond Rows and Columns: Interactive Ext JS Grids and ReExt for React Developers
A data grid can display thousands of records and still leave users doing too much work.
⤷ Title: Reactor (HackTheBox): When a Website With Nothing to Click Still Gets You Root
════════════════════════
𐀪 Author: Abul Kalam Azad
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 18:51:19 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #javascript #cybersecurity #nextjs
════════════════════════
𐀪 Author: Abul Kalam Azad
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 18:51:19 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #javascript #cybersecurity #nextjs
Medium
Reactor (HackTheBox): When a Website With Nothing to Click Still Gets You Root
A beginner-friendly walkthrough of a Next.js deserialization bug, a database full of ancient hashes, and a debugger nobody turned off.
⤷ Title: Your Next.js OG Image Pipeline Has a Critical RCE Vulnerability
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 20:31:01 GMT
════════════════════════
⌗ Tags: #javascript #appsec #javascript_frameworks #application_security
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 20:31:01 GMT
════════════════════════
⌗ Tags: #javascript #appsec #javascript_frameworks #application_security
Medium
Your Next.js OG Image Pipeline Has a Critical RCE Vulnerability
A dependency you never call directly just became a remote code execution vector in your image generation pipeline. That’s the shape of the…
⤷ Title: When a UI API Becomes a Security Boundary
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_engineering #javascript #web_development #application_security
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_engineering #javascript #web_development #application_security
Medium
When a UI API Becomes a Security Boundary
Somewhere in your Next.js app there’s probably a function call that looks harmless. You pass it a JSX element — a title, a background…
⤷ Title: Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 02:00:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_114125 #developer security #javascript #npm #Storybook
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 02:00:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_114125 #developer security #javascript #npm #Storybook
Daily CyberSecurity
Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code
TL;DR Storybook has patched CVE-2026-114125, a CVSS 9.4 Storybook dev server vulnerability that lets a malicious website change files in a developer’s project. Under further conditions, the …
⤷ Title: Polymarket got drained through a page-speed script. Does your site load one?
════════════════════════
𐀪 Author: sudodrift
════════════════════════
ⴵ Time: Fri, 30 Oct 2026 04:00:06 GMT
════════════════════════
⌗ Tags: #crypto #javascript #infosec #cybersecurity #web_security
════════════════════════
𐀪 Author: sudodrift
════════════════════════
ⴵ Time: Fri, 30 Oct 2026 04:00:06 GMT
════════════════════════
⌗ Tags: #crypto #javascript #infosec #cybersecurity #web_security
Medium
Polymarket got drained through a page-speed script. Does your site load one?
On Thursday afternoon, Polymarket’s international site was serving code that nobody at Polymarket wrote. It came in through a script that…
⤷ Title: Securing the Edge: Implementing JWT Blacklisting and Resilient Authentication in Node.js & Express
════════════════════════
𐀪 Author: Emmanuel Christopher Jallay
════════════════════════
ⴵ Time: Fri, 06 Nov 2026 22:00:19 GMT
════════════════════════
⌗ Tags: #nodejs #api_security #backend_development #software_engineering #javascript
════════════════════════
𐀪 Author: Emmanuel Christopher Jallay
════════════════════════
ⴵ Time: Fri, 06 Nov 2026 22:00:19 GMT
════════════════════════
⌗ Tags: #nodejs #api_security #backend_development #software_engineering #javascript
Medium
Securing the Edge: Implementing JWT Blacklisting and Resilient Authentication in Node.js & Express
When building backend APIs, authentication is usually one of the first things we implement. We set up user registration, issue a JSON Web…
⤷ Title: What the UI Hides, the API Tells: How I Found Mass Data Exposure in a Live Chat Feature
════════════════════════
𐀪 Author: A. M. Alogo Situmorang
════════════════════════
ⴵ Time: Mon, 09 Nov 2026 12:06:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #javascript #red_team #json #bugbounty_writeup
════════════════════════
𐀪 Author: A. M. Alogo Situmorang
════════════════════════
ⴵ Time: Mon, 09 Nov 2026 12:06:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #javascript #red_team #json #bugbounty_writeup
Medium
What the UI Hides, the API Tells: How I Found Mass Data Exposure in a Live Chat Feature
Chaining guest JWT tokens, missing rate limits, and verbose JSON responses to land my second bug bounty reward.
⤷ Title: Bypassing Group Role Restrictions Through API Manipulation
════════════════════════
𐀪 Author: Mahan Xp
════════════════════════
ⴵ Time: Tue, 10 Nov 2026 20:40:54 GMT
════════════════════════
⌗ Tags: #fuzzing #mass_assignment #javascript #bug_bounty #api
════════════════════════
𐀪 Author: Mahan Xp
════════════════════════
ⴵ Time: Tue, 10 Nov 2026 20:40:54 GMT
════════════════════════
⌗ Tags: #fuzzing #mass_assignment #javascript #bug_bounty #api
Medium
Bypassing Group Role Restrictions Through API Manipulation
Introduction
⤷ Title: Node.js HTTP/2 and TLS Memory Leak Flaws Fixed in 26.13.1, 24.22.3 and 22.23.5
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 11 Nov 2026 17:41:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_123863 #CVE_2026_123864 #CVE_2026_123874 #Denial of Service #HTTP/2 #JavaScript Security #Memory Leak #Node.js #Node.js HTTP/2 vulnerabilities #tls
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 11 Nov 2026 17:41:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_123863 #CVE_2026_123864 #CVE_2026_123874 #Denial of Service #HTTP/2 #JavaScript Security #Memory Leak #Node.js #Node.js HTTP/2 vulnerabilities #tls
Daily CyberSecurity
Node.js HTTP/2 and TLS Memory Leak Flaws Fixed in 26.13.1, 24.22.3 and 22.23.5
TL;DR The Node.js project shipped security releases 26.13.1, 24.22.3 and 22.23.5, fixing 17 vulnerabilities. Seven are rated high, and most of them are Node.js HTTP/2 vulnerabilities that let an u…